Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

86.508exploits catalogados
40.258CVEs con explotación pública
24.696probados en laboratorio
TodosReferência 26.095Exploit-DB 24.488GitHub PoC 17.831VulnCheck XDB 10.015Nuclei 4547Metasploit 3532✓ solo verificadosrecientespopularesriesgo
26.095 exploits
Referência
CVE-2026-86302
CVE-2026-86302MEDIUM
code-projects Hospital Information System SQL Database Backup File his.sql information disclosure
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Web Template Management System 1.3 - SQL Injection
CVE-2007-5233—webappsphp
SQL injection vulnerability in index.php in Web Template Management System 1.3 allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência✓ VexDay Proof
CCMS 3.1 Demo - SQL Injection
CVE-2007-6658—webappsphp
SQL injection vulnerability in admin.php/vars.php in CustomCMS (CCMS) 3.1 Demo allows remote attackers to execute arbitr
23RIESGO
abrir ↗
Referência
CVE-2017-5717
CVE-2017-5717—
Type Confusion in Content Protection HECI Service in Intel Graphics Driver allows unprivileged user to elevate privilege
23RIESGO
abrir ↗
Referência
CVE-2026-16570
CVE-2026-16570HIGH
NextScripts: Social Networks Auto-Poster < 4.4.8 - Reflected XSS via Facebook OAuth Callback
41RIESGO
abrir ↗
Referência✓ VexDay Proof
DCFM Blog 0.9.4 - SQL Injection
CVE-2008-2671—webappsphp
SQL injection vulnerability in comments.php in DCFM Blog 0.9.4 allows remote attackers to execute arbitrary SQL commands
23RIESGO
abrir ↗
Referência
CVE-2008-4172
CVE-2008-4172—
SQL injection vulnerability in page.php in Cars & Vehicle (aka Cars-Vehicle Script) allows remote attackers to execute a
23RIESGO
abrir ↗
Referência
CVE-2009-4349
CVE-2009-4349—
Cross-site request forgery (CSRF) vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote a
23RIESGO
abrir ↗
Referência
CVE-2009-4349
CVE-2009-4349—
Cross-site request forgery (CSRF) vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote a
23RIESGO
abrir ↗
Referência✓ VexDay Proof
PHP-Nuke Module My_eGallery 2.7.9 - SQL Injection
CVE-2008-7038—webappsphp
SQL injection vulnerability in the My_eGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL comm
23RIESGO
abrir ↗
Referência
CVE-2010-4906
CVE-2010-4906—
SQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote attackers to execute arb
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Leap CMS 0.1.4 - SQL Injection / Cross-Site Scripting / Arbitrary File Upload
CVE-2009-1615—webappsphp
Unrestricted file upload vulnerability in Leap CMS 0.1.4 allows remote attackers to execute arbitrary code by uploading
23RIESGO
abrir ↗
Referência✓ VexDay Proof
See-Commerce 1.0.625 - 'owimg.php3' Remote File Inclusion
CVE-2006-4121—webappsphp
PHP remote file inclusion vulnerability in owimg.php3 in See-Commerce 1.0.625 and earlier allows remote attackers to exe
23RIESGO
abrir ↗
Referência✓ VexDay Proof
eNdonesia 8.4 - '/mod.php/friend.php/admin.php' Multiple Vulnerabilities
CVE-2006-6873—webappsphp
Multiple SQL injection vulnerabilities in mod.php in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL comma
23RIESGO
abrir ↗
Referência✓ VexDay Proof
Nabopoll 1.2 - 'result.php?surv' Blind SQL Injection
CVE-2007-1166—webappsphp
SQL injection vulnerability in result.php in Nabopoll 1.2 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência✓ VexDay Proof
runawaysoft haber portal 1.0 - 'tr' Multiple Vulnerabilities
CVE-2007-2752—webappsasp
SQL injection vulnerability in devami.asp in RunawaySoft Haber portal 1.0 allows remote attackers to execute arbitrary S
23RIESGO
abrir ↗
Referência✓ VexDay Proof
NMDeluxe 2.0.0 - 'id' SQL Injection
CVE-2007-4645—webappsphp
SQL injection vulnerability in index.php in NMDeluxe 2.0.0 allows remote attackers to execute arbitrary SQL commands via
23RIESGO
abrir ↗
Referência✓ VexDay Proof
FoT Video scripti 1.1b - 'oyun' SQL Injection
CVE-2008-4176—webappsasp
SQL injection vulnerability in izle.asp in FoT Video scripti 1.1 beta allows remote attackers to execute arbitrary SQL c
23RIESGO
abrir ↗
Referência
CVE-2026-82473
CVE-2026-82473HIGH
KubeEdge CloudCore through 1.23.1 Missing Authentication on Node Task Endpoints
41RIESGO
abrir ↗
Referência
CVE-2017-14489
CVE-2017-14489—
The iscsi_if_rx function in drivers/scsi/scsi_transport_iscsi.c in the Linux kernel through 4.13.2 allows local users to
23RIESGO
abrir ↗
Referência
CVE-2025-6763
CVE-2025-6763CRITICAL
Comet System H3531 Web-based Management setupA.cfg missing authentication
48RIESGO
abrir ↗
Referência
CVE-2026-28515
CVE-2026-28515CRITICAL
openDCIM <= 23.04 Missing Authorization in install.php
63RIESGO
abrir ↗
Referência
CVE-2026-28515
CVE-2026-28515CRITICAL
openDCIM <= 23.04 Missing Authorization in install.php
63RIESGO
abrir ↗
Referência
CVE-2024-11605
CVE-2024-11605MEDIUM
WP Publications <= 1.2 - Admin+ Stored XSS
33RIESGO
abrir ↗
Referência
CVE-2026-82553
CVE-2026-82553MEDIUM
sambitraj Student Management System Student Dashboard student_dashboard.php mysqli_query improper authorization
33RIESGO
abrir ↗
Referência
CVE-2026-19998
CVE-2026-19998MEDIUM
code-projects Online Shopping System offersmail.php cross site scripting
33RIESGO
abrir ↗
Referência✓ VexDay Proof
Java SE Runtime Environment JRE 6 Update 13 - Multiple Vulnerabilities
CVE-2009-1671—doswindows
Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Env
28RIESGO
abrir ↗
Referência✓ VexDay Proof
32bit FTP - 'PASV' Reply Client Remote Overflow (Metasploit)
CVE-2009-1675—remotewindows_x86
Stack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a
43RIESGO
abrir ↗
Referência
CVE-2009-3509
CVE-2009-3509—
Cross-site scripting (XSS) vulnerability in admin/admin_index.php in CJ Dynamic Poll PRO 2.0 allows remote attackers to
23RIESGO
abrir ↗
Referência
CVE-2009-4620
CVE-2009-4620—
SQL injection vulnerability in the Joomloc (com_joomloc) component 1.0 for Joomla allows remote attackers to execute arb
23RIESGO
abrir ↗
← anteriorpágina 264 / 870siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.